ID de Prueba:	1.3.6.1.4.1.25623.1.0.69972
Categoría:	Debian Local Security Checks
Título:	Debian Security Advisory DSA 2271-1 (curl)
Resumen:	The remote host is missing an update to curl;announced via advisory DSA 2271-1.
Descripción:	Summary: The remote host is missing an update to curl announced via advisory DSA 2271-1. Vulnerability Insight: Richard Silverman discovered that when doing GSSAPI authentication, libcurl unconditionally performs credential delegation. This hands the server a copy of the client's security credentials, allowing the server to impersonate the client to any other using the same GSSAPI mechanism. This is obviously a very sensitive operation, which should only be done when the user explicitly so directs. For the oldstable distribution (lenny), this problem has been fixed in version 7.18.2-8lenny5. For the stable distribution (squeeze), this problem has been fixed in version 7.21.0-2. For the testing distribution (wheezy), this problem has been fixed in version 7.21.6-2. For the unstable distribution (sid), this problem has been fixed in version 7.21.6-2. Solution: We recommend that you upgrade your curl packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2192 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html Debian Security Information: DSA-2271 (Google Search) http://www.debian.org/security/2011/dsa-2271 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061992.html http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062287.html http://security.gentoo.org/glsa/glsa-201203-02.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:116 http://www.redhat.com/support/errata/RHSA-2011-0918.html http://www.securitytracker.com/id?1025713 http://secunia.com/advisories/45047 http://secunia.com/advisories/45067 http://secunia.com/advisories/45088 http://secunia.com/advisories/45144 http://secunia.com/advisories/45181 http://secunia.com/advisories/48256 http://www.ubuntu.com/usn/USN-1158-1
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.